8f5ba37333b63fc20bdf5b3bb43bb2bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f5ba37333b63fc20bdf5b3bb43bb2bf
Size

317KB
MD5

8f5ba37333b63fc20bdf5b3bb43bb2bf
SHA1

57fd86180204ed5e85654ac31f8d449f451263ad
SHA256

63b52b57d8dc06a81c5e28b146efbcdeab6d03ac87cbd87e3103f0127e8e0410
SHA512

14b05366c106e91292ce9c4ae5e351534d0e07bf595b615bf294fc61b1970ff199022403d3dc113aea78fe5760b8aef7efc68f0b14d190878806bb0868ee62ce
SSDEEP

6144:M1S5erOdahiq1GM8uPFnkP+6bPKRx6kY9KUn8ACJQsvd4TkS48nkP+6bQeQJf:MaeiAl1GIPW+3xN5U8tQsiwl+qUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f5ba37333b63fc20bdf5b3bb43bb2bf

Files

8f5ba37333b63fc20bdf5b3bb43bb2bf
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ